Config option to allow pinned packages

Workiva / dependency_validator

A tool to help you find missing, under-promoted, over-promoted, and unused dependencies.

Other

58 stars 18 forks source link

Closed ivk1800 closed 2 years ago

ivk1800 commented 2 years ago

fix https://github.com/Workiva/dependency_validator/issues/83 some projects using pinned packages because: 1) more version control 2) prevent issues with implicit version update, as example https://github.com/dart-lang/sdk/issues/48658

add new option for dart_dependency_validator.yaml

Feature: Added option allow_pins to tell dependency_validator to not fail on any pinned packages

Closes #83

aviary2-wf commented 2 years ago

No security relevant content was detected by automated scans.

Review PR for security impact; comment "security review required" if needed or unsure
Verify aviary.yaml coverage of security relevant code

Questions or Comments? Reach out on Slack: #support-infosec.

evanweible-wf commented 2 years ago

QA +1

@Workiva/release-management-p

chrisgustavsen-wf commented 2 years ago

RM +1